
$ rpki-client -vvf rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft
File: sCOWweSXbcJLufJA9c5Vbtgn-is.mft (raw, json)
Hash identifier: bCcUVYOaN9ZbyUHRw+KQvEfmgxal4A2ts0z+2Q4qPT8=
Subject key identifier: AC:A3:2D:EB:32:BF:62:0C:4C:E1:CB:99:67:6A:B4:DB:A3:57:D8:F0
Authority key identifier: B0:23:96:C1:E4:97:6D:C2:4B:B9:F2:40:F5:CE:55:6E:D8:27:FA:2B
Certificate issuer: /CN=A91124CD/serialNumber=B02396C1E4976DC24BB9F240F5CE556ED827FA2B
Certificate serial: 0181
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft
Manifest number: 017C
Signing time: Wed 25 Mar 2026 03:51:11 +0000
Manifest this update: Wed 25 Mar 2026 03:51:10 +0000
Manifest next update: Wed 01 Apr 2026 03:51:10 +0000
Files and hashes: 1: sCOWweSXbcJLufJA9c5Vbtgn-is.crl (hash: G2WOK3Q1JfojCFA+zamWUPgrLmTkt3+6EJmjJesG/WY=)
2: CC6220C0E02E11EEBA9D291AC4F9AE02.roa (hash: NF/B7iZfQwf1Uq5EPTW6HLPKE2tbKP7FUo9Dka7/k/0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.crl
rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:51:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385 (0x181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91124CD, serialNumber=B02396C1E4976DC24BB9F240F5CE556ED827FA2B
Validity
Not Before: Mar 25 03:51:10 2026 GMT
Not After : Apr 1 03:51:10 2026 GMT
Subject: CN=69c35baf-5103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:60:c6:7d:95:71:0d:32:ec:95:f9:67:b2:2b:
3c:98:03:66:f0:c1:92:42:d0:e4:af:16:62:54:a1:
3d:a1:bb:55:83:46:8a:c1:96:ba:16:81:2a:35:cb:
7c:23:08:39:b5:a0:c5:a8:65:96:f4:73:e7:a5:33:
fd:8f:52:45:b2:86:fd:6a:d7:f4:70:04:da:6b:8d:
32:5a:31:47:a5:e4:81:c8:77:27:d5:27:8f:0f:96:
32:19:b1:2d:00:3b:79:bc:6d:2c:32:6e:9a:09:ca:
d7:57:7c:92:c5:9c:53:0b:fa:7b:d5:e3:e0:39:35:
2d:70:bf:01:27:c5:9c:86:15:3e:c5:84:e2:47:2b:
80:46:e7:ed:20:02:fc:71:10:00:a4:ef:4c:86:8b:
2e:5d:94:2f:6c:b7:ed:21:2f:da:7c:9a:5c:db:3e:
5e:e1:b4:08:02:2e:87:e2:a9:c6:1e:09:ea:60:97:
ed:3c:be:57:8c:9e:62:d4:68:19:72:e8:ed:cd:8a:
28:5f:93:c5:20:73:a0:b8:2e:2f:a9:2f:00:f1:d8:
ba:37:b2:e2:f6:69:c1:58:79:3f:ac:37:b8:82:f6:
2c:b8:91:2b:37:40:ae:af:f5:19:ce:2e:0d:8c:27:
51:2a:17:a3:42:4b:d5:62:22:c4:64:26:78:5b:7e:
9c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A3:2D:EB:32:BF:62:0C:4C:E1:CB:99:67:6A:B4:DB:A3:57:D8:F0
X509v3 Authority Key Identifier:
keyid:B0:23:96:C1:E4:97:6D:C2:4B:B9:F2:40:F5:CE:55:6E:D8:27:FA:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:50:38:85:06:be:cf:36:29:b0:b7:ff:80:f7:2f:33:9e:60:
db:d8:a3:ed:ba:3b:13:81:fa:23:0c:b1:03:2b:26:a6:49:75:
7b:0c:49:61:a1:eb:a0:97:b2:dc:86:4a:37:59:d7:eb:c5:0b:
76:93:0a:d0:33:22:9e:f8:c4:a8:73:17:d7:d0:de:e3:73:6a:
ef:35:be:77:34:14:28:c8:07:82:67:f0:56:0a:0f:27:6c:fe:
f9:ee:6d:41:78:20:16:2d:1b:c1:e6:53:82:92:58:4d:23:23:
0d:58:75:53:60:cc:c1:51:c8:39:29:a5:77:f0:36:bf:3b:b6:
7e:33:32:82:cc:27:68:55:df:28:d2:01:cd:5e:50:2a:9a:23:
3a:f1:0e:e1:f6:e2:23:82:7b:c5:70:16:da:e4:e0:74:8e:5a:
00:18:ff:1f:f1:2a:63:88:3c:c4:ba:ab:47:01:c1:d7:d2:75:
6d:22:ff:11:43:dd:c8:b6:97:8b:37:7b:55:61:aa:0f:3e:41:
4f:5d:91:74:77:c7:fa:4d:86:a5:17:bb:3f:e3:e9:a6:f0:6c:
39:3f:bc:c7:97:1c:d7:4d:3b:bd:ba:86:a3:fe:63:f1:e0:7f:
74:e1:bb:6c:5c:7d:bf:ad:47:eb:79:b5:19:5d:25:2f:11:e2:
86:f6:15:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:25 2026 by rpki-client